$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4597c228-f40e-3c69-9190-c888dab82d75.roa File: 4597c228-f40e-3c69-9190-c888dab82d75.roa (raw, json) Hash identifier: h28Pnv+iid0101v3TIS0iGFvX5NM/I1T/3kAc75CGMQ= Subject key identifier: 03:4B:BD:42:AC:0D:87:BD:18:17:AF:C7:E2:56:F8:E0:6A:83:E1:E5 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4F99F25CC864A136B3D870 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4597c228-f40e-3c69-9190-c888dab82d75.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 170.85.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:99:f2:5c:c8:64:a1:36:b3:d8:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=f067cba7-b68d-464a-8ccd-8c334bf88795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:21:5f:f6:1d:df:3c:3a:17:86:c1:1c:a1:fa: 0a:72:de:c9:7b:74:5e:47:1b:0a:f5:78:10:46:66: e1:98:ca:c2:86:33:01:47:72:30:6b:3f:5e:32:90: 08:92:ad:80:6b:49:4f:aa:6f:08:d5:f0:29:d8:89: b7:bf:8c:fd:be:7e:d1:0f:db:86:6c:66:fa:b4:8c: 24:3e:4c:2f:7b:17:87:a3:18:ac:50:0e:93:61:f9: e0:79:91:a2:84:8c:1d:01:a2:89:56:94:c3:dd:4b: 0c:af:ef:ee:c9:fb:cc:92:b7:d3:5c:81:f2:7b:b4: 5b:32:9d:00:f9:9c:34:f0:32:2d:ea:a5:99:8a:2d: 95:5e:9d:1e:fe:c9:00:19:8a:7e:1c:c7:de:11:b4: ec:d3:8f:fa:b7:ee:c9:eb:2c:9e:5c:58:d4:bf:a0: 0f:e5:01:0b:3a:6d:c6:72:66:82:d2:21:85:33:70: 6e:7c:e7:2c:3e:cd:11:8e:1f:37:ff:e9:40:f9:b7: 82:06:8a:de:6c:b3:e0:7d:42:89:b2:d4:d7:45:f6: 50:32:11:51:8d:e0:30:c4:4f:e0:4c:8b:db:a8:57: b7:23:2c:38:dd:20:6d:ad:8b:88:36:a8:02:ac:54: ac:2c:a0:e6:7d:7d:3e:18:1a:6e:fb:2b:5a:f2:31: f5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:4B:BD:42:AC:0D:87:BD:18:17:AF:C7:E2:56:F8:E0:6A:83:E1:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4597c228-f40e-3c69-9190-c888dab82d75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:de:3d:c0:44:51:1e:e7:a7:b8:5f:c9:02:0e:c1:d8:e4:ca: e0:55:bc:7e:9b:ab:cd:f6:fa:74:13:aa:67:d3:0c:c0:98:cb: 15:ef:9b:94:17:6a:17:55:19:3d:25:86:79:d4:ae:db:94:63: bc:50:43:49:ef:d5:fd:ee:3b:4c:53:bc:d0:db:04:11:fa:61: db:1e:a1:b2:02:b1:3d:1c:57:b3:9f:d1:23:47:61:db:01:83: 36:6a:2f:3c:8c:58:b0:e6:b3:bd:46:7a:bd:d8:0a:99:78:eb: f0:93:9a:c2:28:de:7c:17:52:9e:02:36:39:df:80:5b:4b:8c: a1:a9:52:79:5d:52:a8:de:6e:8d:da:d9:24:f5:ac:ea:95:f8: 3a:1c:59:c7:0c:9b:fc:89:bd:b4:19:25:25:fa:57:24:86:f4: 6f:a9:5a:39:fc:f4:a1:fa:c7:c4:22:90:1a:32:c0:70:7f:24: 85:50:81:34:d0:65:2c:ee:d5:dc:52:ca:63:ef:84:c8:8d:72: 4f:73:c7:99:c3:49:24:1d:3e:e9:02:0e:f3:27:36:a3:03:d8: 9d:b1:6d:5a:0d:89:04:29:ea:6f:54:35:b6:ba:5a:6f:bc:93: 2d:a1:13:96:08:51:6e:02:8a:6f:59:38:0c:9e:c4:c5:75:9b: 2e:2d:29:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT5nyXMhkoTaz2HAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk ZjA2N2NiYTctYjY4ZC00NjRhLThjY2QtOGMzMzRiZjg4Nzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSFf9h3fPDoXhsEcofoKct7Je3ReRxsK9XgQ RmbhmMrChjMBR3Iwaz9eMpAIkq2Aa0lPqm8I1fAp2Im3v4z9vn7RD9uGbGb6tIwk PkwvexeHoxisUA6TYfngeZGihIwdAaKJVpTD3UsMr+/uyfvMkrfTXIHye7RbMp0A +Zw08DIt6qWZii2VXp0e/skAGYp+HMfeEbTs04/6t+7J6yyeXFjUv6AP5QELOm3G cmaC0iGFM3BufOcsPs0Rjh83/+lA+beCBorebLPgfUKJstTXRfZQMhFRjeAwxE/g TIvbqFe3Iyw43SBtrYuINqgCrFSsLKDmfX0+GBpu+yta8jH1jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANLvUKsDYe9GBevx+JW+OBqg+HlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNDU5N2MyMjgtZjQwZS0z YzY5LTkxOTAtYzg4OGRhYjgyZDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlWoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzePcBEUR7np7hfyQIOwdjkyuBVvH6bq832+nQTqmfTDMCYyxXvm5QX ahdVGT0lhnnUrtuUY7xQQ0nv1f3uO0xTvNDbBBH6YdseobICsT0cV7Of0SNHYdsB gzZqLzyMWLDms71Ger3YCpl46/CTmsIo3nwXUp4CNjnfgFtLjKGpUnldUqjebo3a 2ST1rOqV+DocWccMm/yJvbQZJSX6VySG9G+pWjn89KH6x8QikBoywHB/JIVQgTTQ ZSzu1dxSymPvhMiNck9zx5nDSSQdPukCDvMnNqMD2J2xbVoNiQQp6m9UNba6Wm+8 ky2hE5YIUW4Cim9ZOAyexMV1my4tKRs= -----END CERTIFICATE-----Generated at Fri Apr 17 21:31:54 2026 by rpki-client